On 08/15, Jim Schueler wrote:
>    the attached. �All share a common marker of embedding a text url within an
>    HTML <a> tag containing a different URL. �This seems like an obvious
>    marker for spam, I wonder why there isn't a rule for it.

There is a rule.  It hits 10x as much non-spam as spam:

ruleqa.spamassassin.org/?rule=%2Fspoofed_url

There was some work on improving it:
http://osdir.com/ml/users-spamassassin/2011-10/msg00237.html

It didn't work out:
http://osdir.com/ml/users-spamassassin/2011-10/msg00304.html

Feel free to try to do better.

-- 
"Just because you're offended, doesn't mean you're right." - Ricky Gervais
http://www.ChaosReigns.com

Reply via email to